its complicated by fact that the Russian and Chinese govs run ops to try to compromise software and systems worldwide, partly to help achieve certain goals like

its complicated by fact that the Russian and Chinese govs run ops to try to compromise software and systems worldwide, partly to help achieve certain goals like stealing IP or acquiring blackmail, to cite just a subset. And while not in a hot (shooting) war with the US/NATO/EU we are de facto in a soft/hybrid one. Current generation is far too trusting of any ole rando FOSS code or SaaS they see pitched. Recklessly naive. If I had the amorality to be a black hat I'd be having the time of my life right now. GitHub alone is one of the best malware injection vectors ever.